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IN THE CLAIMS: 



1 Claims 1-11 (Canceled) 

1 12. (Currently Amended) A method for limiting the operational life of software in a 

2 network environment, the method comprising: 

3 providing a program applet embedded with an associated password 

4 to a client via a network; 

5 receiving from said program applet via said network a request for 

6 information stored in a restricted access storage area[J; 

7 further receiving from said program applet said [request comprising 

8 said] associated password , for authentication ; 

9 authenticating said associated password; 

10 thereafter providing said information to said program applet via said 

1 1 network while said associated password is valid; and 

12 invalidating said password coincident with an invalidation event. 

1 13. (Currently amended) A method according to claim 12 wherein said invalidating 

2 comprises invalidating said associated password at a predetermined time. 

1 14. (Currently amended) A method according to claim 12 wherein said invalidating 

2 comprises invalidating said associated password after a predetermined elapsed time 

3 from when said request was received. 

1 15. (Currently amended) A method according to claim 12 wherein said invalidating 

2 comprises invalidating said associated password upon the detection of a loss of 

3 communication with said client. 

1 16. (Cancelled) 
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17. (Cancelled) 

18. (Currently amended) A method according to claim 12 wherein said providing 
comprises generating said associated password at a server upon receiving said 
request at said server. 

Claims 19-26 (Canceled) 

27. (Currently Amended) A network-based software authentication system 
comprising a serve r, the server comprising: 

a password generator; 

password validation apparatus; 

a restricted-access storage area; 

a program applet; and 

invalidation apparatus; 
wherein said server is operative to: 

a) cause said password generator to generate a password; 

b) embed said password within said program applet, and provide 
said program applet embedded with said password to a client via a network; 

c) receive a request for information and receive said password, for 
authentication, from said program applet via said network[, said request comprising 
said associated password]; 

d) authenticate said password using said password validation 

apparatus; 

e) provide said information to said program applet via said network 
while said associated password is valid; and 

f) invalidate said password using said invalidation apparatus 
coincident with an invalidation event. 
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28. (Original) A system according to claim 27 wherein said invalidation event 
comprises the arrival of a predetermined time. 

29. (Original) A system according to claim 27 wherein said invalidation event 
comprises the elapsing of a predetermined elapsed time from when said request was 
received. 

30. (Original) A system according to claim 27 wherein said invalidation event 
comprises the detection of a loss of communication with said client. 

31. (Cancelled) 

32. (Cancelled) 

33. (Original) A system according to claim 27 wherein said password is generated at 
said server upon receiving said request at said server. 
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